SSO users aren't automatically added to email domain-based groups

mbb70 · 2017 年 10 月 20 日午後 5:14

When you are generating your SSO payload, you can set the add_groups field based on your user’s email, where add_groups is a comma delimited string of groups. I haven’t seen any documentation on this but the code is pretty clear:

github.com/discourse/discourse

app/models/discourse_single_sign_on.rb

9813f9f0f


      
          if add_groups
            split = add_groups.split(",").map(&:downcase)
            if split.length > 0
              Group.where('LOWER(name) in (?) AND NOT automatic', split).pluck(:id).each do |id|
                unless GroupUser.where(group_id: id, user_id: user.id).exists?
                  GroupUser.create(group_id: id, user_id: user.id)
                end
              end
            end
          end

That was our workaround to this issue and it has been working so far.

トピック		返信	表示
Automatic addition of users to group based on email domain SSO	5	1600	2020 年 4 月 8 日
Users are not added to the moderators groups when registering with SSO Bug sso , discourseconnect	2	2300	2016 年 5 月 17 日
Groups not being added to new users SSO	3	1961	2017 年 7 月 31 日
Permissions not being applied to new or existing users by domain Support	8	1096	2018 年 9 月 5 日
SSO and Restricted Groups SSO	2	3024	2017 年 3 月 1 日

SSO users aren't automatically added to email domain-based groups

関連トピック